{"id":"https://openalex.org/W2901939447","doi":"https://doi.org/10.1109/tcc.2018.2883063","title":"Threat-Specific Security Risk Evaluation in the Cloud","display_name":"Threat-Specific Security Risk Evaluation in the Cloud","publication_year":2018,"publication_date":"2018-11-23","ids":{"openalex":"https://openalex.org/W2901939447","doi":"https://doi.org/10.1109/tcc.2018.2883063","mag":"2901939447"},"language":"en","primary_location":{"id":"doi:10.1109/tcc.2018.2883063","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tcc.2018.2883063","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tcc.2018.2883063","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077355226","display_name":"Armstrong Nhlabatsi","orcid":"https://orcid.org/0000-0002-7081-6115"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Armstrong Nhlabatsi","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-7081-6115","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011163136","display_name":"Jin B. Hong","orcid":"https://orcid.org/0000-0003-1359-3813"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jin B. Hong","raw_affiliation_strings":["Department of Computer Science and Software Engineering, University of Western Australia, Crawley, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1359-3813","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019789320","display_name":"Dong Seong Kim","orcid":"https://orcid.org/0000-0003-2605-187X"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dong Seong Kim","raw_affiliation_strings":["School of Information Technology and Electrical Engineering, University of Queensland, St Lucia, QLD, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Technology and Electrical Engineering, University of Queensland, St Lucia, QLD, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102733867","display_name":"Rachael Fernandez","orcid":"https://orcid.org/0000-0002-4650-6344"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Rachael Fernandez","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034523692","display_name":"Alaa Hussein","orcid":"https://orcid.org/0000-0002-6364-5389"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Alaa Hussein","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020600623","display_name":"Noora Fetais","orcid":"https://orcid.org/0000-0003-3609-2659"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Noora Fetais","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0003-3609-2659","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108364226","display_name":"Khaled M. Khan","orcid":"https://orcid.org/0000-0002-8848-0760"},"institutions":[{"id":"https://openalex.org/I60342839","display_name":"Qatar University","ror":"https://ror.org/00yhnba62","country_code":"QA","type":"education","lineage":["https://openalex.org/I60342839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Khaled M. Khan","raw_affiliation_strings":["Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-8848-0760","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, KINDI Center for Computing Research, Qatar University, Doha, Qatar","institution_ids":["https://openalex.org/I60342839"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6241,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.9435117,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"9","issue":"2","first_page":"793","last_page":"806"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8020710945129395},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.7991731762886047},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7733690142631531},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.7248640060424805},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7146220207214355},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.6671288013458252},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6031116843223572},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.5054419040679932},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.5015606880187988},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4840187728404999},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.46714115142822266},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.4542352557182312},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.41717061400413513},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1291898488998413}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8020710945129395},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.7991731762886047},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7733690142631531},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.7248640060424805},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7146220207214355},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.6671288013458252},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6031116843223572},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5054419040679932},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.5015606880187988},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4840187728404999},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.46714115142822266},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.4542352557182312},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.41717061400413513},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1291898488998413},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/tcc.2018.2883063","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tcc.2018.2883063","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/d9df6c63-da11-46dc-a863-b5c0256be5b4","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/d9df6c63-da11-46dc-a863-b5c0256be5b4","pdf_url":null,"source":{"id":"https://openalex.org/S4306402523","display_name":"UWA Profiles and Research Repository (University of Western Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Nhlabatsi , A , Hong , J B , Kim , D S , Fernandez , R , Hussein , A , Fetais , N & Khan , K M D 2021 , ' Threat-specific security risk evaluation in the cloud ' , IEEE Transactions on Cloud Computing , vol. 9 , no. 2 , 8543671 , pp. 793-806 . https://doi.org/10.1109/TCC.2018.2883063","raw_type":"article"},{"id":"pmh:oai:espace.library.uq.edu.au:UQ:98d4c38","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402388","display_name":"Queensland's institutional digital repository (The University of Queensland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I165143802","host_organization_name":"The University of Queensland","host_organization_lineage":["https://openalex.org/I165143802"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},{"id":"pmh:oai:qspace.qu.edu.qa:10576/52819","is_oa":false,"landing_page_url":"http://hdl.handle.net/10576/52819","pdf_url":null,"source":{"id":"https://openalex.org/S4306400014","display_name":"Qatar University QSpace (Qatar University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60342839","host_organization_name":"Qatar University","host_organization_lineage":["https://openalex.org/I60342839"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1109/tcc.2018.2883063","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tcc.2018.2883063","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8824043266","display_name":null,"funder_award_id":"NPRP 8-531-1-111","funder_id":"https://openalex.org/F4320332753","funder_display_name":"Qatar National Research Fund"}],"funders":[{"id":"https://openalex.org/F4320332753","display_name":"Qatar National Research Fund","ror":"https://ror.org/01svaqq28"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1536325007","https://openalex.org/W1759629755","https://openalex.org/W1773581294","https://openalex.org/W1847647515","https://openalex.org/W1974302259","https://openalex.org/W1977781738","https://openalex.org/W1991160483","https://openalex.org/W2013967191","https://openalex.org/W2022578767","https://openalex.org/W2030367271","https://openalex.org/W2080119146","https://openalex.org/W2116836841","https://openalex.org/W2118810451","https://openalex.org/W2122483144","https://openalex.org/W2131875370","https://openalex.org/W2150343364","https://openalex.org/W2158327591","https://openalex.org/W2193139925","https://openalex.org/W2256307994","https://openalex.org/W2276629685","https://openalex.org/W2318224047","https://openalex.org/W2331321712","https://openalex.org/W2342723101","https://openalex.org/W2518093493","https://openalex.org/W2526389764","https://openalex.org/W2550313813","https://openalex.org/W2558252482","https://openalex.org/W2599777545","https://openalex.org/W2728603974","https://openalex.org/W2752689002","https://openalex.org/W2758682319","https://openalex.org/W2779021133","https://openalex.org/W2799575409"],"related_works":["https://openalex.org/W2165898552","https://openalex.org/W2745157681","https://openalex.org/W2397931496","https://openalex.org/W2030343105","https://openalex.org/W1528506334","https://openalex.org/W2290724697","https://openalex.org/W2008985775","https://openalex.org/W2299494954","https://openalex.org/W2055319964","https://openalex.org/W833563683"],"abstract_inverted_index":{"Existing":[0],"security":[1,11,20,36,65,74,103,126,144,161,172],"risk":[2,21,30],"evaluation":[3,31,127,167],"approaches":[4,115],"(e.g.,":[5,41],"asset-based)":[6],"do":[7,118],"not":[8,119,194],"consider":[9],"specific":[10,102,106,134,177],"requirements":[12,66,162],"of":[13,38,46,52,76,96,128,150,160],"individual":[14,97],"cloud":[15,40,78,130],"computing":[16,94],"clients":[17,98,182],"in":[18,67,88,186],"the":[19,39,44,50,57,63,68,77,92,112,121,125,129,137,140,158,187,190,198,219],"evaluation.":[22],"In":[23],"this":[24],"paper,":[25],"we":[26],"propose":[27],"a":[28,73,148,214],"threat-specific":[29],"approach":[32,71,142,192],"that":[33,170],"uses":[34],"various":[35],"attributes":[37],"vulnerability":[42],"information,":[43],"probability":[45],"an":[47,184],"attack,":[48],"and":[49,163],"impact":[51],"each":[53],"attack":[54],"associated":[55],"with":[56,131,155],"identified":[58],"threat(s))":[59],"as":[60,62],"well":[61],"client-specific":[64,153],"cloud.":[69,188],"Our":[70],"allows":[72],"administrator":[75],"provider":[79],"to":[80,90,123,133,146,157,176,196,206,217],"make":[81],"fine-grained":[82],"decisions":[83],"for":[84,183],"selecting":[85],"mitigation":[86],"strategies":[87],"order":[89],"protect":[91],"outsourced":[93],"assets":[95],"based":[99],"on":[100],"their":[101],"needs":[104],"against":[105],"threats.":[107,135,164],"This":[108],"is":[109,193],"different":[110,181],"from":[111],"existing":[113],"asset-based":[114],"where":[116],"they":[117],"have":[120,211],"functionalities":[122],"provide":[124],"respect":[132,156],"On":[136],"other":[138,207],"hand,":[139],"proposed":[141,191,220],"enables":[143],"administrators":[145],"compute":[147],"range":[149],"more":[151],"effective":[152,171],"countermeasures":[154],"importance":[159],"The":[165],"experimental":[166],"results":[168],"demonstrate":[169],"solutions":[173],"vary":[174],"due":[175],"threats":[178],"prioritized":[179],"by":[180],"application":[185],"Further,":[189],"limited":[195],"only":[197],"cloud-based":[199],"systems,":[200],"but":[201],"can":[202],"easily":[203],"be":[204],"adopted":[205],"networked":[208],"systems.":[209],"We":[210],"also":[212],"developed":[213],"software":[215],"tool":[216],"support":[218],"approach.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}